Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: KSNvQqqc3TjbR+OVFUXRv/A9Ok21Bre9nQHFp0XYlsU=
Subject key identifier: 2B:97:29:4F:42:B5:84:DE:A1:84:8E:6A:93:28:C0:E6:9D:8C:0E:D9
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019EB544C59DE4B3A638EF8AA1B3516C4ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 083D
Signing time: Thu 11 Jun 2026 06:00:43 +0000
Manifest this update: Thu 11 Jun 2026 06:00:43 +0000
Manifest next update: Fri 12 Jun 2026 06:00:43 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: Qg2oFwpuahxjeSv63lz30oxxE9E4GYqHKETg93EjKNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:44:c5:9d:e4:b3:a6:38:ef:8a:a1:b3:51:6c:4e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Jun 11 06:00:43 2026 GMT
Not After : Jun 12 06:00:43 2026 GMT
Subject: CN=2b97294f42b584dea1848e6a9328c0e69d8c0ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:02:30:41:b3:75:90:71:76:ed:6a:ec:0a:
e8:92:6c:70:6b:8a:77:72:37:e9:60:04:f9:f4:c4:
3b:3f:db:57:66:43:18:2d:08:89:3e:68:02:a2:33:
63:1d:8a:86:ea:aa:fc:8e:9b:b9:f5:65:47:63:8c:
eb:c1:d5:8e:26:7b:4e:75:38:21:ca:d7:ac:a4:57:
e5:f3:5e:f8:bc:c7:0d:d6:d9:8e:ef:88:33:bf:81:
fa:ed:a3:0b:fa:d3:58:3a:f7:b7:38:fe:44:f1:81:
9c:cb:8b:6e:03:50:4b:41:f5:c4:97:0e:31:a0:5b:
89:22:84:a9:df:0a:a8:8c:c2:42:07:8a:e4:9b:b2:
55:38:6a:1d:15:27:fe:14:bb:1c:02:26:96:64:5a:
a1:d0:ac:60:a8:52:3c:2c:b6:c3:bc:63:36:9d:d1:
37:88:a8:c4:b9:ab:95:30:a5:8e:0d:49:5a:8a:91:
0c:b7:73:48:c1:10:7c:f4:f9:30:49:df:81:97:33:
f4:fd:cb:37:07:33:a9:6c:95:5f:a1:d7:e5:55:04:
29:db:22:57:51:98:de:d8:a7:72:ea:26:e9:ac:ca:
f6:fb:c8:7d:fa:38:8b:e7:aa:bb:69:e4:0c:e9:38:
83:94:1d:24:4d:af:e9:5c:a8:3a:16:06:0b:c5:21:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:29:4F:42:B5:84:DE:A1:84:8E:6A:93:28:C0:E6:9D:8C:0E:D9
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fa:37:fd:87:e5:20:8e:b8:ef:67:f7:89:9d:0c:73:27:20:
74:02:d8:b2:ea:97:1c:87:e6:bb:43:60:02:c2:df:56:e3:3b:
91:f9:31:28:8e:eb:87:b2:f4:ca:e1:dd:f1:2a:b6:d8:43:e8:
53:5c:b8:b1:80:5c:8a:11:ae:cd:bb:23:e1:ba:27:53:ef:0d:
77:af:f3:63:71:b3:c8:9f:38:6a:06:e5:8f:ca:91:23:72:68:
79:78:45:b6:b9:82:d6:2c:e4:39:e9:41:d6:ac:6f:1f:81:aa:
c8:61:4f:0b:b7:33:79:f2:61:2a:82:85:f1:10:9c:5e:76:02:
03:26:a8:8f:a2:35:22:c8:98:2f:92:2a:53:36:90:c3:76:59:
8f:33:12:81:b3:bb:be:80:21:f3:e0:7c:19:63:09:bc:67:88:
e1:0f:42:4e:ca:05:bb:52:7a:ee:dd:c6:d3:3a:3e:0a:6c:cd:
e0:c0:b3:f1:4d:53:af:f6:07:35:e6:88:83:50:ab:a8:4e:ee:
e2:0e:60:1b:80:14:40:f9:33:5c:22:24:06:5b:ef:4e:4e:b3:
c7:08:75:b1:c3:f2:9d:90:31:1b:5e:e9:61:62:ef:a5:94:e6:
c7:05:7f:21:27:d3:d1:38:d8:19:ab:2f:6c:20:20:88:12:5f:
73:7f:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:09:26 2026 by rpki-client